Privacy policy (other)
To process your order, you must provide me with certain information (that you have authorised Etsy to transmit to me), in particular your name, email address, postal address, payment details, as well as a description of the product you are ordering. You may also decide to provide me with additional personal information (for a personalised knitwear order, for example), by contacting me directly.
I rely on a number of legal bases to collect, use and share your information, and in particular :

To provide you with my services, for example when I use your information to process your order, resolve a dispute or provide customer service;
when you have given me your explicit consent, which you can revoke at any time, for example by subscribing to my newsletter;
where necessary to comply with a legal obligation, a legal ruling or in connection with a request from the courts, such as keeping information about your purchases for tax purposes; and
if necessary to further my legitimate interests, where those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you have requested and in my legitimate interest to improve those services; and 2) compliance with the Etsy Seller Rules and Terms of Use. I use your information as necessary to comply with my obligations under the Etsy Seller Guidelines and Terms of Service.

Information about my customers is important to my business. I only share your personal information for a very limited number of reasons, and in a limited number of circumstances such as :

Etsy. I share your information with Etsy when necessary to provide my services to you and to comply with my obligations under the Etsy Seller Rules and Terms of Service.
Service Providers. I use certain trusted third parties to perform certain actions or provide certain services for my shop - shipping companies, for example. I may need to share your personal information with these third parties, but only to the extent necessary to perform these services.
Business transfers. If I sell my business or merge it with another, I may need to share your information as part of that transaction, but only to the extent permitted by law.
Compliance with legislation. I may need to collect, use, retain and share your information if I believe in good faith that doing so is necessary and reasonable to: (a) comply with a legal process or governmental request; (b) enforce my agreements, terms or regulations; (c) prevent, investigate or respond to fraud or other illegal activity, or technical or security issues; or (d) protect the rights, property or safety of my customers or others.

I retain your information only as long as necessary to provide my services to you and for the purposes set out in my privacy policy. I may also need to retain this information to comply with legal and statutory obligations, resolve disputes and enforce my undertakings. I generally keep this information for a period of : 4 years.

If you are a resident of certain jurisdictions, including the European Union, you have certain rights in relation to your personal information. Some of these rights apply generally, and others only in limited cases. These rights are described below:

Access. You may have the right to access the personal information I hold about you and to receive a copy of it by contacting me. You will find my contact details below.
Modify, restrict, delete. You may also have the right to amend your personal information, restrict my use of it or delete it. Other than in exceptional circumstances (for example, if I need to retain data relating to my shop for legal reasons), I will generally delete your personal information on request.
Objecting. You may object 1) to my processing certain of your information for my legitimate interests and 2) to receiving marketing messages from me after you have explicitly consented to receive them. In these cases, I will delete your personal information unless I have legitimate grounds for continuing to use it, or it is required for legal reasons.
Making a complaint. If you live in the European Union and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you can do so with your local data protection authority.

How to contact me

Under European data protection law, I, Susan Burden, am the data controller in respect of your personal information. If you have any questions or concerns, you can contact me at susan.wb@hotmail.com. Alternatively, you can send me a letter by post to the address:

Susan Burden, Tricot Creations, Mas Murillo, Rue Cami Ralet, 66170 Saint Féliu d'Amont, France